Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/TzfRur66FvDbfYwIA6WTfABNKR8.roa
File: TzfRur66FvDbfYwIA6WTfABNKR8.roa (raw, json)
Hash identifier: Lp4TCK/sD0FuHrDCv4h92ORem/N9lPxO/RDYZXsGVHM=
Subject key identifier: 4F:37:D1:BA:BE:BA:16:F0:DB:7D:8C:08:03:A5:93:7C:00:4D:29:1F
Certificate issuer: /CN=e637899b505f34c75577031ad15d461159fa3ecc
Certificate serial: 019F2368F0B3EBD9E8961349AB9D6F0D7311
Authority key identifier: E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/TzfRur66FvDbfYwIA6WTfABNKR8.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58006
IP address blocks: 91.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:b3:eb:d9:e8:96:13:49:ab:9d:6f:0d:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e637899b505f34c75577031ad15d461159fa3ecc
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f37d1babeba16f0db7d8c0803a5937c004d291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:cc:f5:da:5d:2b:41:c0:e8:0a:2a:28:e9:
d7:16:aa:a3:ea:ef:34:29:9a:04:18:e8:b9:e1:a2:
8d:94:eb:9e:b7:d4:2c:d1:5f:ca:45:3b:42:c0:ce:
ea:8c:1a:52:04:e7:cb:44:50:14:d0:6b:2d:a1:6b:
9c:e2:aa:04:1f:ce:33:16:7d:38:68:f3:57:80:80:
ad:56:ca:0d:1d:83:d6:23:43:3a:fa:15:8e:7f:c1:
c5:16:c1:10:3f:20:f9:70:9b:9e:b4:29:ef:a7:54:
54:7d:f2:29:42:b9:29:ca:24:84:0c:71:ef:00:5c:
18:78:72:72:a9:65:69:b9:8f:06:e6:e5:22:d6:e0:
63:1e:3a:d3:ef:e1:9e:af:51:8e:ed:75:da:67:57:
a9:98:6b:23:73:42:5a:2d:fb:49:6c:97:1d:b3:24:
e8:4c:8f:6f:bb:d0:63:a9:ce:72:79:19:34:f5:15:
54:22:d6:d3:98:07:36:75:96:35:1c:f7:f2:70:5b:
67:77:c2:c6:ed:b4:74:08:fe:34:62:1a:d8:2c:c7:
18:a1:4d:df:19:d4:7f:4f:70:b7:81:64:02:8c:42:
9a:cd:09:27:be:e2:e2:c7:c3:c0:7e:43:87:65:e3:
77:57:4f:4f:ca:70:64:45:45:4f:28:5e:59:e8:92:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:D1:BA:BE:BA:16:F0:DB:7D:8C:08:03:A5:93:7C:00:4D:29:1F
X509v3 Authority Key Identifier:
keyid:E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/TzfRur66FvDbfYwIA6WTfABNKR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cf:2c:5d:be:78:cf:62:34:e9:5e:88:5f:7c:01:27:0d:e6:
f6:e0:b8:ef:33:d5:d4:5d:c3:f2:9e:b0:b4:97:fe:87:c0:8f:
db:fe:e2:78:5d:1e:da:6f:cd:a2:39:6e:09:7c:62:31:a7:d5:
79:ac:1e:e7:d4:a6:1b:57:a0:43:16:e6:8e:38:73:5c:84:64:
09:6a:a2:04:db:0e:31:63:15:7d:bb:f7:34:37:fe:25:ba:88:
b7:d3:e0:fb:21:d4:db:ed:87:90:94:f6:43:85:5c:a0:70:c8:
56:f3:f4:ea:7d:0d:4a:7a:0b:a8:0d:ab:50:7f:c3:e1:2a:60:
63:11:d5:fd:bd:60:78:6c:04:fa:9d:c6:50:44:83:12:47:af:
b0:20:7a:ce:19:2b:4d:06:05:f8:13:b4:72:7b:93:61:23:ea:
45:d0:f2:fc:fc:ab:6e:19:54:ab:f5:57:a9:59:9e:18:64:15:
64:84:bc:1e:8f:cb:e7:1f:03:14:d7:4e:99:74:0a:b6:ba:c4:
48:2a:01:90:f3:f4:db:bb:fc:00:87:61:03:f7:35:d1:c0:9e:
f9:a8:b6:33:3a:e2:aa:4a:35:19:c4:3b:9e:c3:ff:af:e9:33:
99:04:53:6d:b4:17:f2:ba:c2:7f:89:e0:28:6f:f5:4a:aa:9b:
db:69:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:00 2026 by rpki-client